Blockchain security monitor PeckShieldAlert reported that 19 million THEO tokens were minted on Base and subsequently swapped for 700.8 ETH. The alert attributes the activity to on-chain transactions on the Base network, though the available information does not establish whether the mint was authorized, accidental, or the result of an exploit.
What PeckShieldAlert reported about the THEO activity on Base
According to the PeckShieldAlert report, the sequence began with the minting of 19 million THEO tokens on Base, Coinbase’s Layer 2 network built on the OP Stack. The minted tokens were then swapped, with the reported proceeds totaling 700.8 ETH. PeckShieldAlert did not confirm the identity of the wallet involved or the precise timestamp of the transactions in the initial alert. For related coverage, see Blur to Close Its Frontend Next Month: What We Know.
The alert does not classify the event as a hack, exploit, or authorized action. Readers tracking similar on-chain incidents may recall that the 79thVault incident involved a comparable token-to-native-asset swap pattern, though the mechanics and context of each case differ. For related coverage, see Kraken to Launch in UAE After Full Regulatory Approval.
Why the reported THEO mint and ETH swap warrant attention
A mint of 19 million tokens followed by an immediate conversion to a liquid asset like ETH is a pattern that security monitors flag as a potential indicator of unauthorized token issuance. That said, it can also occur in legitimate protocol operations such as liquidity bootstrapping or treasury management. Without an official statement from the THEO project, neither reading is confirmed. For related coverage, see Uniswap Unichain Moves to OP Enterprise for Native Interoperability.
For THEO token holders and liquidity participants on Base, the reported activity is a monitoring signal rather than a confirmed loss event. The distinction matters: a confirmed exploit would imply direct harm to protocol liquidity, while an authorized mint would not. Readers should await a response from the relevant project team before drawing conclusions about the nature or impact of the transaction.
PeckShieldAlert has previously flagged similar large-scale movements on other networks. The firm reported a transfer of 23,600 ETH from an Alameda/FTX-labeled address, illustrating how on-chain monitoring can surface significant wallet activity before official confirmation arrives. In that case, as here, initial alerts preceded any official acknowledgment.
Base users and DeFi participants on the network can verify on-chain details independently through Basescan, the block explorer for the Base network, once the relevant transaction hash is publicly identified. Until then, the alert stands as an unconfirmed but attributed report from a recognized blockchain security source.
Additional source references: source document 1.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.



